I am noob to rsyslog, but from the documentation I've been able to find, I was able to get remote logging for the standard syslog stuff set up fine, messages, mail, auth/secure, etc.
However, I've been trying to get a couple of non-standard stuff going with mixed results. First, there is fail2ban. I configured /etc/rsyslog.conf as follows: # fail2ban log local6.* /var/log/fail2ban.log and fail2ban.conf as follows: loglevel = 3 logtarget = SYSLOG syslog-facility = 22 syslog-target = /var/log/fail2ban.log fail2ban logs remotely, but instead of to the file specified above (I touched it), it logs to messages. What did I miss? Similarly, I created a cisco log and generated logging on the cisco. In this case, it does log to the file I created, but it duplicates it to messages as well. Clues appreciated! _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
